Function TestEncodingJSONCorpusSanity

encoding_json_fuzz_test.go:714–763

============================================================================= Non-fuzz regression test (runs under plain `go test`) ============================================================================= TestEncodingJSONCorpusSanity runs every seed + a batch of grammar-generated inputs through

(t *testing.T)

//
// Verifies: SYS-REQ-035
func TestEncodingJSONCorpusSanity(t *testing.T) {
	// 1. encoding/json-specific seeds.
	for i, seed := range encodingJSONSeeds {
		seed := seed
		t.Run(fmt.Sprintf("seed_%02d_%s", i, truncateForName(seed)), func(t *testing.T) {
			runEncodingJSONGates(t, seed)
		})
	}

	// 2. Shared structureAwareSeeds (data only).
	for i, s := range structureAwareSeeds {
		s := s
		t.Run(fmt.Sprintf("struct_seed_%02d_%s", i, truncateForName(s.data)), func(t *testing.T) {
			runEncodingJSONGates(t, s.data)
		})
	}

	// 3. Grammar-generated + mutated inputs (the path that exercises
	//    structure-aware generation most directly under `go test`).
	r := rand.New(rand.NewSource(0xDEADBEEF))
	for i := 0; i < 300; i++ {
		depth := r.Intn(4)
		if r.Intn(10) == 0 {
			depth = 5 + r.Intn(3)
		}
		data := genJSON(r, depth)
		for n := r.Intn(4); n > 0; n-- {
			data = applyMutation(r, data)
		}
		i, data := i, data
		t.Run(fmt.Sprintf("gen_%03d", i), func(t *testing.T) {
			runEncodingJSONGates(t, data)
		})
	}

	// 4. Gate D: deterministic deep-nesting depths (CVE-2020-29652 class).
	t.Run("deep_nesting", func(t *testing.T) {
		runDeepNestingDepths(t, []int{100, 1000, 10000, 100000})
	})

	// 5. Gate H: deterministic deep-nesting transform DoS gate (Compact /
	//    Indent / HTMLEscape on deeply-nested input — the recursive scanner
	//    path that Gate D's Unmarshal test does NOT cover).
	if !testing.Short() {
		t.Run("transform_dos", func(t *testing.T) {
			runTransformDoSGate(t, 1000)
			runTransformDoSGate(t, 10000)
		})
	}
}

// truncateForName renders a byte slice for use as a subtest name, capping the
// length so deeply-nested seeds (100 KB) don't produce gigantic test IDs.